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We present an efficient quantum algorithm for the exact evaluation of either the fully ferromagnetic 
or anti-ferromagnetic g-state Potts partition function Z for a family of graphs related to irreducible 
■ cyclic codes. This problem is related to the evaluation of the Jones and Tutte polynomials. We 

consider the connection between the weight enumerator polynomial from coding theory and Z and 
exploit the fact that there exists a quantum algorithm for efficiently estimating Gauss sums in order 
£N| ■ to obtain the weight enumerator for a certain class of linear codes. In this way we demonstrate 

that for a certain class of sparse graphs, which we call Irreducible Cyclic Cocycle Code (ICCC e ) 
graphs, quantum computers provide a polynomial speed up in the difference between the number of 
edges and vertices of the graph, and an exponential speed up in q, over the best classical algorithms 
known to date. 
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I. INTRODUCTION 



A wealth of results has been obtained since the dramatic early results [H,[3| on quantum speedups relative to classical 
algorithms. A relatively unexplored field is quantum algorithms for problems in classical statistical mechanics. The 
earliest contribution to this subject Q obtained a modest speedup in that it avoided critical slowingdown [ij in 
the problem of sampling from the Gibbs distribution for Ising spin glass models. Subsequently Ref. @ raised the 
t^"- 1 question of providing a classification of classical statistical physics problems in terms of their quantum computational 
complexity. In this work we shed light on this classification by considering the problem of evaluating the Potts model 
(-h i partition function Z for classical spin systems on graphs. It is known that under particular conditions even certain 
O ,' approximations for Z are unlikely to be efficient, barring an NP = RP surprise @. Here we present a class of sparse 
graphs (which we call ICCC C ) for which exact quantum evaluation of Z is possible with a polynomial speedup over 
£^ ' the best classical algorithms available to date. 

A. The Potts Model 



Let r = (E, V) be a weighted graph with edge set E and vertex set V . The g-state Potts model is a generalization 
of the Ising model where a g-state spin resides on each vertex. In the Ising model q — 2, whereas in the Potts 
model q > 2. The edge connecting vertices i and j has weight Jy, which is also the interaction strength between the 
corresponding spins. The Potts model Hamiltonian for a particular spin configuation a = (g\, owi) is 

H(a) =-J2 JijSw, (1) 

<ij> 

where summation is over nearest neighbors, and where 5 aia . = 1 (0) if <7i = o~j (iJi ^ Cj). Thus only nearest 
neighbor parallel spins contribute to the energy. The probability -P(c), of finding the spin in the Potts model in some 
configuration a at a given temperature T, is given by the Gibbs distribution 

- -zW < 2 » 

where (3 — \/(ksT) is the inverse temperature in energy units, and fcs is the Boltzmann constant. The normalization 
factor is the partition function 



Z{P) = Y.z HiHW i (3) 
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which plays a central role in statistical physics, since many thermodynamic quantities can be derived from it 0]. 
When for all configurations (3 <C \H(a)\, the probability distribution becomes flat: P(cr) « 1/Z(f3), so that at high 
temperatures randomness dominates. 

The partition function can be rewritten as a polynomial: 

Z(j3) = £V E <«> JiiSa *"i =Y, II ^ J ^ a% ° ] 

M M <ij> 

{<r} <U> 

where 

VlJ ((3) = e^-l. (5) 

Now let us consider the case when the interactions are a constant J. Then the Hamiltonian of this system 
can be written as 

H(a) = -J\U(a)\ (6) 

where /7(a) is the subset of edges whose vertices have the same spin for a particular spin configuration a, and |t/(cr)| 
is the number of such subsets. If we let 

V = (7) 

we can write the Potts partition function as 

Z(y) = Y,y- ma)l - (8) 

B. Relation between the Potts partition function, knot invariants, and graph theory 

There is a rich inter-relation between classical statistical mechanics and topology, in particular, the theory of 
the classification of knots. The first such connection was established by Jones [8|, who discovered the second knot 
invariant (the Jones polynomial (a Laurent polynomial), after the Alexander polynomial) during his investigation of 
the topological properties of braids . It is known that the classical evaluation of the Jones polynomial is jJP-hard 

M- 

The connection between knots and models of classical statistical mechanics was embellished by Kauffman jTlj]. 
Knot invariants are, in turn, also tightly related to graph theory; e.g., the graph coloring problem can be considered 
an instance of evaluation of the Kauffman bracket polynomial, via the Tutte polynomial [Til [l2| . The g-state Potts 
partition function on a graph T is connected to the Tutte polynomial Tp for the same graph via 

Z r (v)=q n T r (V±^,v + l) (9) 

v 

where as in Eq. ©, v + 1 = e- fj . This means that the Potts partition function is equivalent to some easily computed 
function times the Tutte polynomial along the hyperbola Ti. q — (x— l)(y — 1) = q. But for planar graphs, when q > 2 
the Tutte polynomial is j}P-hard to evaluate at points along TL q 0] . For a review of the connection between the Potts 
partition function and the various polynomials mentioned above, see [ll[ and also [1, It immediately follows from 
Eq. ^ and complexity results concerning the Tutte polynomial, that the evaluation of the Potts partition function 
is also |P-hard. It is not known whether there is an fpras (fully polynomial randomized approximation scheme) Q 
for the g-state fully ferromagnetic Potts partition function, but it is known that if there is an fpras for the fully 
anti-ferromagnetic Potts partition function then NP = RP 0] and therefore it seems unlikely that an fpras will be 
found for this case. 
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C. Previous quantum complexity results 



The first connection between knots and quantum mechanics was established by Witten, who showed that the 
Jones polynomial can be expressed in terms of a topological quantum field theory [14j . Recently this connection was 
extended to the possibility of efficient evaluation of the Jones polynomial by Freedman and co-workers, after showing 
that quantum computers can efficiently simulate topological quantum field theory [l5l |. More specifically, there are 
recent results demonstrating the efficacy of quantum computers in approximating the Jones polynomial at primitive 
roots of unity [l6|, [13, EH ■ In Ref. [IB] tools from topological quantum field theory [3] were utilized and it was shown 
that approximating the Jones polynomial at primitive roots of unity is BQP-complete, but no explicit algorithm was 
provided. More recently in [17| . a combinatorial approach was taken which yielded an explicit quantum algorithm 
and which extended the results in [l6l | to all primitive roots of unity. This leads one to hypothesize that quantum 
computers will also be efficient at estimating partition functions. Indeed, an immediate corollary of the results in 
[ltl [I?], fl8| , is that the Potts partition function over any planar graph can be approximated efficiently on a quantum 
computer at certain imaginary temperatures (see also |5(). This follows by noting that in order to obtain an equality 
between the Potts partition function and the Jones polynomial (up to multiplication by an easily computed function) , 
the Jones variable t and the temperature T must be related by t = —e ±J± / kuT [ll[. With t a root of unity (t = e^ 1 ) 



This result is of interest mainly in light of quantum Monte Carlo simulations 19], where one retrieves real time 
dynamics from a simulation in terms of imaginary time, via analytic continuation. Perhaps a similar extrapolation 
can be achieved here between imaginary and real temperature dynamics. While this is interesting, here we are 
concerned with thermodynamics, and hence evaluations of the Potts partition function at physically relevant, real 
temperatures. 

Most closely related to our work is the very recent result due to Aharonov et al. [13] who - generalizing Temperley- 
Lieb algebra representations used in [ItJ - provided a quantum algorithm for the additive approximation of the Potts 
partition function (and other points of the Tutte plane) for any planar graph with any set of weights on the edges. 
These results are the most impressive to date in the context of approximate evaluations of the Potts partition function, 
but are also subject to certain caveats. To quote from the abstract of Ref. [20| : "Additive approximations are tricky; 
the range of the possible outcomes, might be smaller than the size of the approximation window, in which case the 
outcome is meaningless. Unfortunately, ruling out this possibility is difficult: If we want to argue that our algorithms 
are meaningful, we have to provide an estimate of the scale of the problem, which is difficult here exactly because no 
efficient algorithm for the problem exists!". And: "The case of the Potts model parameters deserves special attention. 
Unfortunately, despite being able to handle non-unitary representations, our methods of proving universality seem to 
be non- applicable for the physical Potts model parameters. We can provide only weak evidence that our algorithms 
are non-trivial in this case, by analyzing their performance for instances for which classical efficient algorithms exist. 
The characterization of the quality of the algorithm for the Potts parameters is thus left as an important open 
problem." Finally, quoting from Section 1.5 of Ref. [2tij |: "Proving anything about the complexity of our algorithm for 
the Potts model, remains a very important open problem. It is still possible that this case of the Tutte polynomial, 
with our additive approximation window, can be solved by an efficient classical algorithm." To summarize, Ref. [20 ] 
leaves as an open problem the complexity of physical instances (real temperature, positive partition function) under 
the restriction of an additive approximation. Nor is it clear whether the algorithm found in Ref. [2(| provides a 
quantum speedup. The authors state: "We believe that the main achievement here is that we demonstrate how to 
handle non- unitary representations, and in particular, we are able to prove universality using non-unitary matrices." 



Recently Ref. [2l| gave a scheme for studying the partition function of classical spin systems including the Potts 
and Ising model. Their approach involves transforming the problem of evaluating the partition function into the 
evaluation of a probability amplitude of a quantum mechanical system and then using classical techniques to extract 
the pertinent information. In essence their method involves moving into a quantum mechanical formalism to obtain 
a classical result. The scheme is therefore classical and not a quantum algorithm. 

In addition, two purely classical results should be mentioned here. One is a state of the art result by Hartmann 
[22| , who provides an algorithm which is well suited to large ferromagnetic systems for either the Potts or Ising model. 
We do not know the exact complexity of this algorithm, however. The approach taken in our work is to utilize 
the connection between classical coding theory and the partition function. For this reason we mention the classical 
algorithm given in 23] for calculating the Zeta function of certain curves. This is also a state of the art algorithm 
and it can be used to find the Potts partition function via the scheme we present in this paper, though it is slower 
than using quantum resources. 



we then find: 



T = i 



J±r 



r en. 



k B n(2 + r) 
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A quantum algorithm for finding the Zeta function of a curve is given in [24| . One could replace the role that the 
Gauss sum estimation 25] plays in our scheme with this quantum algorithm for the Zeta function. It seems that 
using Gauss sums is more efficient but further work is required to make this conclusive. 

II. A THEOREM ABOUT QUANTUM COMPUTATION AND CERTAIN INSTANCES OF THE POTTS 

MODEL 

A. Main Theorem 

We present here a polynomial time quantum algorithm for the exact evluation of the g-state (fully ferromagnetic 
or anti-ferromagnetic) Potts partition function Z for a certain class of graphs. This class of graphs, which we call 
"Irreducible Cyclic Cocycle Code" ICCC e graphs, comprises graphs whose incidence matrices generate certain cyclic 
codes. This and other concepts used below are given precise definitions in Section Hi B I The key ingredients used are 
the connection of Z to the weight enumerators of codes [26[ and a quantum algorithm for the approximation of Gauss 
sums [25| . 

The overall structure of the algorithm is the following: 

1. Given a graph T = (E, V), first determine if T belongs to the ICCC e class. This decision problem can be solved 
efficiently using the quantum discrete log algorithm [ij. If T £ ICCC e proceed to step 2, else the algorithm may 
not evaluate Zr efficiently. 

2. Identify the linear code C(T) for which we shall determine the weight spectrum. 

3. Using the quantum Gauss sum estimation algorithm find the weight spectrum of the words in C. This step is 
believed to be classically hard but the exact complexity is unknown. It is known, however, that this step is 
at least as hard as determining discrete log [25j. This is the most expensive step of the algorithm due to the 
large number of words one has to deal with. This is because the number of possible spin configurations grows 
exponentially in the number of vertices. 

4. Take a tally of the weight spectrum obtained in the previous step. Grover's search algorithm can be used 
to give an additional quadratic speed up but this does not help in reducing the overall complexity since the 
computational cost of step 3 is greater than that of the current step. 

5. Using the relation given by equation (|15p between the weight spectrum of a code and Z, use the tally from the 
previous step to obtain Z (for graphs in ICCC e ). 

We now give the main theorem, after the definition of the family of graphs for which the scheme applies. 

Definition 1 (lCCC e ) Given a constant e < 1, ICCC e is the family of graphs whose cycle matroid matrix (CMM) 
representation generates a cyclic code whose dual is irreducible cyclic of dimension k and length n, such that 

n - ^ ~ 1 (10) 
(where aeRis chosen so that neN and where s(k) is an arbitrary function whose role will be clarified below) and 

n ,k = —^—r min S'(jn) (11) 

q — 1 0<j<afe s < fc ) 

(where S'(x) is the sum of the digits of x in base q) so that 

e<V?f ( i2 ) 

4vV 

Below we define the concepts entering this definition and clarify the role of Q n ^ and of the bound on e. 
We work in units such that the Boltzmann constant ks = 1. 

Theorem 2 (Main Theorem) Let T = (E,V) be a graph, n = \E\ and k = \E\ - \V\ + c(T) where c(T) is the 
number of connected components ofT. A quantum computer can return the exact q-state fully anti-ferromagnetic or 
ferromagnetic Potts partition function Zp for graphs in ICCC e . For each family (e fixed), the overall running time is 
0(ifc 2max [ 1 ^ s (' c )](logg) 2 ) and the success probability is at least 1 — 6, where S = [2{{q k — l) 2 e — 2] _1 . 
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Some remarks: 

1. The function s(k) determines the complexity of the schemes. If s(k) = c G R (constant) then we have a 
polynomial time algorithm for the exact evaluation of Z for each family ICCC e . This restriction is reflected in 
the graphs by enforcing that n = 0(q k /k s ), i.e., that the number of edges (n) and vertices (n — k) is close. We 
have numerically solved for the number of edges \E\ as a function of the number of vertices |V|, given by the 
corresponding transcendental equation \E\ = \V\—c(r)+log q (\E\(\E\ — \V\ + c(T)) s + l) [Eq. ([TO])]. A numerical 
fit reveals that to an excellent approximation 

\E\ = \V\+a + b\og\V\, (13) 

where the constants a and b depend on q and s, and both increase slowly with s, and decrease with q, as shown 
in Fig. Q] By direct substitution of Eq. (fT3|) into the above transcendental equation it can be seen that the 
analytical solution will have a a correction of order log log( | ) to the right-hand side of Eq. (fTB")) . The fact that 
there are logarithmically more edges that vertices in the graphs that are members of ICCC e is the reason we 
call these graphs sparse. The important point is that there are families of graphs for which there exist exact 
polynomial-time evaluation schemes via the methods presented in this paper. As we show below, in these cases 
we also obtain polynomial speed ups over the best classical algorithms available. 

2. Note that if we have an efficient evaluation for ICCC e then we also have an efficient evaluation for ICCC e , 
provided e > e'. 

3. We provide a discussion of the computational complexity, both classical and quantum, in subsection IIIII As 
argued there, we obtain a polynomial speed up in the difference between the number of edges and vertices and 
an exponential speed up in q over the best current classical algorithm for the ICCC e class of graphs. 



Corollary 1 For a given graph Y , whose CMM is the direct sum of the CMMs of two graphs Ti and T 2 in ICCC e; 
a quantum computer will be able to return Zr with a running time equal to the sum of the running times required to 
obtain Zy x and Zr 2 ■ 



Proofs of the main theorem and the corollary are provided in Sections III Dl and III El 
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B. Background 

Theorem [2] connects the problem of estimating the Potts partition function to a quantum algorithm for Gauss sums, 
via weight enumerators for irreducible cyclic codes. In somewhat more detail, the connections we need are as follows. 
In [2(| , it was shown that the Potts partition function can be written as the weight enumerator of the cocycle code 
of the graph T, over which the Potts model is defined. Weight enumerators of irreducible cyclic codes are related to 
Gauss sums via the McEliece Theorem [27| ■ 

1. Cycle Matroid Matrix Representation of a Graph 

A connected component of a graph is any subset of vertices which are all connected to each other via a path along 
the graph's edges. We denote the number of connected components by c(T). The incidence matrix of a finite graph 
r(_E, V) is a |V| x \E\ binary matrix where column c represents edge c with non-zero entries in row i and j if and 
only if vertices i and j are the boundaries of edge c. Every finite graph T also gives rise to a cycle matroid matrix 
(CMM) [28| , which essentially captures the presence and locations of cycles in the graph. 

Definition 3 The cycle matroid matrix of a graph T — (E,V), CMM(T), is formed as follows: write down the 
incidence matrix ofT using 1 for the ith and — 1 for the jth rows, where i < j . Then apply elementary row operations 
and Gaussian reduction to obtain a (|V| — c(T)) x \E\ matrix of the form c (r) \X], where I a is the a x a identity 
matrix and X is a {\V\ - c{T)) x (\E\ - |V| + c{Y)) matrix. This is CMM(T) (See Prop. 4.7.14 of fH/j. 

We give more details on cycle matroids in Appendix [Al As an example consider the square [\V\ = \E\ = 4, c(T) = 1] 
and its incidence matrix 

1 -1\ 
-11 1 
0-11 0' 
0-11/ 

Applying elementary row operations and Gaussian reduction one obtains the CMM 

10 0-1 
10-1 
1-1 

which is indeed of the form [-f|v|-c(r)l^] with dimensions as in the definition, i.e., X is (4 — 1) x (4 — 4 + 1). Over 
Z2 one would replace all the — l's with +l's. The column space of this matrix represents the cycle structure of the 
graph where a cycle (or circuit) is a path in the graph for which the first vertex of the path is the same as the last. 
Any set of columns that are linearly dependent indicate a cycle. The first three columns in the CMM of the square 
are linearly independent, but together with the fourth column they become linearly dependent, since there is a cycle 
in the graph involving the corresponding four edges. 

What is the equivalence class of graphs with the same CMM? This is answered by the following: 

Definition 4 Two graphs G and G' are called 2-isomorphic if there exists a 1 — 1 correspondence between the edges 
of G and G' such that the cycle (or circuit) relationships are preserved. 

Thus all 2-isomorphic graphs have the same CMM (up to elementary row and column operations). 

2. Irreducible Cyclic Codes 

We provide some background material in coding theory which allows us to exhibit the connection between Eq. ([5]) 
and the so-called cocycle code of the graph T. (A good reference is pOj.) 

Definition 5 Let F q be a finite field with q prime. A linear code C is a k dimensional subspace of the vector space 
F™ and is referred to as an [n, k] code. The code is said to be of length n and of dimension k. 
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In our case q is the the number of possible states per spin. 

Definition 6 A k x n matrix whose rows are a basis for C is called a generator matrix for C . 

Recall from Definition [3] that CMM(r) is a (|V| - c(T)) x \E\ matrix. The \E\ columns of CMM(r) reflect the 
cycle structure of the given graph via linear independence in the vector space F™ (see Appendix [AJ . We now view 
the \V\ — c(r) rows of the CMM as generating an [n = \V\,k — \E\ — c(T)] "cocycle code" C: 

Definition 7 The cocycle code C(T) of a graph T is the row space of CMM(T). \2aj 

We focus our attention on a subclass known as cyclic codes and a smaller subclass known as irreducible cyclic codes. 

Definition 8 A linear code C is a cyclic code if for any word (cq, c%, . . . , c„_i) € C , also (c„_i, cq, c%, . . . , c n -2) G C . 
If C contains no subspace ( other than ) which is closed under cyclic shifts then it is irreducible cyclic. 

Cyclic codes have an interesting underlying algebraic structure which we review in Appendix [Bj In general the 
generator matrix of an [n, k] cyclic code can be written as 



(go gi ■■■ g n -k 

go ■ ■ ■ gn~k~\ g n -k 

••• 

V • • • g 9l 




(14) 



The non-zero matrix elements can be used to construct the "generator polynomial" g(x) = go + g\x + ■ ■ ■ g n -kX n ~ k ■ 
Both can be used to generate a cyclic code; the manner in which this is done via the generator polynomial is reviewed 
in Appendix [B] For an [n, k] non-degenerate irreducible cyclic code (no words are repeated) the relation between n 
and k is k — ord g n, i.e., k is the smallest integer such that q k = 1 modn. Equivalently, q k — 1 = nN, where N counts 
the number of equivalence classes under cyclic permutations of words, which is an upper bound on the number of 
different weights. Non-degenerate irreducible cyclic codes have generator polynomials of the form 

( \ xn - 1 

Wi(x) 

where x n — 1 = wi(x)w2(x) ■ ■ ■ Wt{x) is the decomposition of x n — 1 into irreducible factors. In this work we consider 
only non-degenerate irreducible cyclic codes. Here t is the number of g-cyclotomic cosets modn (see subsection III F|) . 
Next we explain the connection to weight enumerators. 

Definition 9 Let C be a linear code of length n and let Ai be the number of vectors in C having i non-zero entries 
(Hamming weight of i) . Then the weight enumerator of C is the bi-variate polynomial 

n 

A(x,y) = J2^ n ~ i V i - 

i=0 

The set {Ai} is called the weight spectrum of the code. 

In this paper our only concern for the weight spectrum is its connection to the Potts partition function, but in 
coding theory it can be used to reveal information about the effiency of a code [30| . The connection between equation 
([8]) and the cocycle code of the graph T for the Potts model is given in the following theorem proved in [2(| . 

Theorem 10 Let A{x,y) be the weight enumerator of the [n — \E\,k = \V\ — c(T)] cocycle code C(T) of the graph 
r = (E, V), and let the number of states per spin (vertex) in the corresponding Potts model be a prime q. Then 

Z r (y)=y- n q c(r) A(l,y). (15) 

We take q to be prime and not a power of a prime to simplify matters. In this manner the cocycle code has words 
whose entries are in F q , as will the corresponding irreducible cyclic code in the trace representation over F q r - see 
Appendix [B] for details. 

The connection between the Potts partition function and weight enumerators can also be understood via a previous 
result which shows that Z is equivalent to the Tutte polynomial (under certain restrictions) and that the weight 
polynomial of a linear code is also equivalent to the Tutte polynomial ^lj. We also note that a relation similar to 
Eq. (fT5|) was established in [j| for the Ising spin glass partition function and so-called quadratically signed weight 
enumerators, along with a discussion of computational complexity. 
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C. Testing the graph for membership in the ICCC e class 

We now have the tools to address the issue of whether a graph should be accepted as input into the main algorithm, 
i.e., whether a graph belongs to the ICCC e class. This is handled as follows. 

- Input : A graph T with \E\ edges and 11^1 vertices, the given Galois field of q k elements and e. 

- Output : Accept or Reject. Let n = \E\ and k = \E\ — \V\ + c(T) as in the main theorem. 

- Overall Complexity: 0(|-E| • k 2 log k log log k) due the ability to take the discrete log \E\ times efficiently with a 
quantum computer 

1. Compute 9 nt k as given in Definition [T] 

2. Find CMM(T). It is a (n — k) x n matrix of the form [7„_fc|A], where X is a (n — k) x k matrix. Form the 
k x n (transpose parity check) matrix H T = [— X T \Ik\- H T generates an [n, k] code C (T) that is dual to the 
cocycle code C(T). 

e„ fc -i 

3. Determine if e < - — and if k is the multiplicative order of qmodn (i.e., k is the smallest integer such that 
q k = 1 modn). If both are true then go to the next step. Else skip the next step and continue. 

4. Main Loop: 

(a) Fix a basis of GF(q k ) over GF(q) and consider the columns of H T as coordinate vectors of some elements 
9i of GF(q k ). 

(b) Calculate the discrete logarithms \og(gi) of each gi with respect to a fixed primitive element g (every 
element in the field can be written as g l for some X) of GF(q k ) using Shor's algorithm [l| on a quantum 
computer. 1 

(c) Accept or Reject T based on the fact that C 1 - is (equivalent to) an irreducible cyclic code if and only if 
the numbers log(gi) are are some permuted list of consecutive integer multiples of N := (q k — l)/n in 
some order. This is due to the fact that by definition the generator matrix of an irreducible cyclic code is 
equivalent to (1 g N i g 2N ^ ... gC™" 1 )^') where gcd(n, j) = 1 [H. 

5. Step c failed. Using elementary row operations transform H T to a block diagonal matrix if possible. If not 
possible then Reject. If possible then go to step c and input each sub-matrix and continue. 

D. Proof of the Main Theorem 

1. Preliminaries 

We introduce Gauss sums as this is the vital link between the Potts partition function and quantum computation. 
Appendix \C\ contains a more detailed exposition as well as an outline of a proof that there exists a polylog quantum 
algorithm for estimating Gauss sums. Here however it is essential only to understand the following. Given a field 
F q k , there is a multiplicative and additive group associated with it. Namely, the multiplicative group is F* fc = F q k \ 
and the additive group is F q k itself. Associated with each group are canonical homomorphisms from the group to the 
complex numbers, named the additive and multiplicative characters. The multiplicative character ^ is a function of 
the elements of F* fc and the additive character is a function of F q k and is parameterized by /3 € F q k . A Gauss sum 
is then a function of the field F q k , the multiplicative character x and the parameter (3, and can always be written as 

G Fqk ( X ,P) = V?e^, (16) 

where 7 is a function of \ an d /?■ It is in general quite difficult to find the angle 7. The^ complexity of estimating this 
quantity via classical computation is not known but there is evidence that it is hard [251 ] . 
We now introduce the trace function over finite fields. 



1 For every non-zero x £ F q i-/{0} the discrete logarithm with respect to a primitive element (i.e., generator) g of F 9 r is given by 
toggO) = l °gg(g J ) = 3 mod (<?'' - !)• 
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Definition 11 Let q be prime, k a positive integer, and let F q k be the finite field with q k — 1 non-zero elements. The 
trace is a mapping Tr : F q k i— > F q and is defined as follows. Let £ € F q k . Then 

k-l 

3=0 

Now let q k = 1 + nN where n and N are both positive integers, and let 7 generate the multiplicative (cyclic) group 
F* fc = F g fc\{0}. Each of the q k words of an [n, k] irreducible cyclic code may then be uniquely associated with an 
element x £ F q k and may be written as 



(Tr(x), Tr( X1 N ), Tr(xj 2N ), . . . , Tr(x^ n ~ 1)N )), (18) 

where k is the smallest integer such that q k = 1 modn. For a proof of this statement see [13] or [33| |. 

As stated in Theorem [5J we are essentially interested in obtaining the weight spectrum of [n,k] irreducible cyclic 
codes. The number of words with different non-zero weight is at most N where N = (q k — l)/n (for a proof see 
Proposition [1] in Appendix IB) . Now let w(x) be the Hamming weight of the code word associated with x £ F* fc . The 
McEliece Theorem connects the weights of words of irreducible cyclic codes to Gauss sums. 

Theorem 12 (McEliece Formula) Let w(y) for y £ F* k be the weight of the code word given by Eq. U8\) . let 

q k = 1 + nN where q is prime and k, n and N are positive integers, let d — gcd(iV, (q k — l)/(q— 1)), and let the 
multiplicative character x be given by x(t) = exp(2m/d), where 7 generates F* k . (x is called the character of order 
d.) Then the weight of each word in an irreducible cyclic code is given by 

For a proof of this see [32j . 

The important feature here is that if we had the ability to efficiently estimate Gp k (x,P), then we would be able 
to find the weights of the words in an irreducible cyclic code efficiently under the restrictions mentioned in Theorem 
[2]. This would in turn allow us to find the weight spectrum {Af\ of the code. The following theorem reveals that a 
quantum computer can efficiently approximate Gauss sums. 

Theorem 13 (van Dam & Seroussi [25]) For any e > 0, there is a quantum algorithm that estimates the phase 
7 in Gf kiXiP) — 1 with expected error E(\j — 7I) < e. The time complexity of this algorithm is bounded by 

o(i-(iog(<? fc )) 2 ). fM] 

(For details see Appendix 0) 

The Gauss sum algorithm allows one to estimate 7 in Eq. (|16[) to within any accuracy e, i.e., the algorithm returns 
7' such that 1 7' — 7I < e. The hope is that if one can approximate 7 precisely enough then one would get an exact 
evaluation of the weight. In fact an essential step here is to use a quantum computer to obtain a list of approximate 
angles {7^} for t = 1, . . . , d — 1 for d given above. 

The next theorem gives some minimum distance between weights so that we can choose an appropriate error that 
will allow one to be able to distinguish between weights, which allows us to obtain accurate coefficients for A(l,y) 
and hence exact values for the exponents. 

Theorem 14 (McEliece [3A]) All the weights of an [n, k] irreducible cyclic code are divisible by q n ' k ~ 1 , where 
is given in Definition^ 



2. The Proof 

We are now ready to prove Theorem [21 
Proof. Assume that a given graph Y = (E, V) is a member of ICCC e , where n = \E\ and k = \E\ — \V\ + c(T). Hence 

it is given that e < s — 'j=^ = eq. We want to obtain Zr for either the fully ferromagnetic or anti-ferromagnetic Potts 
model. It follows from Definition Q] that the dual of the cocycle code of T is an irreducible [n, k] cyclic code. We must 
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demonstrate that we can obtain the weight enumerator A(l,y) of this dual code within the claimed number of steps. 
As mentioned above, since nN = q k — 1 there are then at most N different weights, with at least n words of each 
weight (see the appendix). In order to find the spectrum {Ai}, we are faced with the computational task of finding 
the range of 



qN 



qN 



(20) 



(where again d = gcd(iV, q k — 1/q — 1) and i £ {0, . . . , N — 1}) and then performing a tally. 
The proof consists of five main parts: 

1. Proof that with e bounded by eo as given, it is possible to distinguish between weights of the words of the code 
that corresponds to the given graph. This ability allows for an exact evaluation of Zy- 

2. We need to justify our asymptotic approach and show that for a fixed error e there are a countable number of 
graphs in ICCC e . 

3. Proof that the success probability 6 is as stated in the Theorem. 

4. Proof that the running time is as stated in the Theorem. 

5. A transformation from the dual (irreducible cyclic) code to the cocycle code of the graph whose Potts partition 
function we are evaluating. 

Let us now prove each of these five parts. 

1. The first question we must address is the following: how small do we need to make the error e in the phases 
returned in the Gauss sum approximation algorithm so that we will be able to distinguish between weights? We now 
show that e < eo is sufficient, and hence that for every member of the class ICCC e it is possible to distinguish between 
weights. 

Let w(y) be the approximated weight returned by the quantum Gauss sum algorithm. It follows from Theorem 1 141 
that two consecutive weights are separated by a distance that is an integer multiple of q 9n - k ^ 1 . Hence, a sufficient 
condition for being able to associate w(y) with the correct weight w(y) (and not another neighboring weight) is: 



\w(y)-w(y)\ < (21) 
Let the error between the actual phase ji and the approximated phase ji be e, i.e., 

hi < e- 

Let us derive a bound on e. Taking w(y) given in Theorem [T2] and the necessary bound given in equation (|21[) we 
find that we need the inequality 



x(y)- a e v 



x(2/)"V 



< 



qN q 6 



1 



(9-1) 



(22) 



to be satisfied. Now, we have 



< 



El 



< (l cos (7a) ~ cos( 7a ))| + |(sin( 7a ) - sin(7 a ))|) 

a 

< 2(d-l)h a -%\ <2(d-l)e 

where the last inequality follows from the Mean Value Theorem of elementary calculus. Therefore, if we impose 

qN j 



e < 



(3-l)(d-l) 



(23) 
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then inequality ((22)) is satisfied. Consider the factor ^ q _^ d _^ ■ Noting from N < ak s that d — gcd(iV, (q k — l)/(q — 
1)) < ak s = N, it follows that 1 < < = <3(fc s W). Thus we can replace the bound by the tighter 

bound 

a 6 n>k -i-k/2 

£ < 1 1 = e 0> (24) 

and this e is definitely small enough to satisfy the required bound given in Eq. (|2ip . 2 Hence, if e < en. it is possible 

to resolve the weights w(y) for different words y. This, in turn, gives us the ability to exactly reconstruct the weight 
enumerator A, and from there the partition function Zr- 
2. We prove the following lemma. 

Lemma 15 Given a fixed e < 1 there are countably many graphs in ICCC e , i.e., there are infinitely many correspond- 
ing irreducible cyclic codes such that {9 ni ,ki) satisfies 

IfWi-i-^- >e . (25) 

What this means is that there is at least one family of graphs for a given fixed e for which one will be able to obtain 
the exact Potts partition function. This also justifies the complexity arguments used herein. 

Proof. We shall construct one such family and show that it satisfies the required relations. For simplicity take e = 4e. 
We must construct one family of graphs for which the corresponding irreducible cyclic codes, [rij, fej, satisfy 

^ i ,fc i +log ? (e- 1 )>l + |. (26) 

Take q fixed and consider the following countable set of irreducible cyclic codes: {[q m — 1, fc m ]} m =i,2,3,...- First we 
must note that 

0<r-i,*» = m - ( 27 ) 

This follows from the properties of addition in base q: the k digits of q k — 1 in base q are all (q— 1), and adding integer 
multiples of q k — 1 will not decrease the digit sum. I.e., 

S'{T]{q m - 1)) > m{q - 1) Vr; G N. 

This is important to keep in mind when we consider extending this family later in this proof. Now we must demonstrate 
that there is at least one k m that satisfies Eq. (f2"6"|) . Because we are dealing with irreducible cyclic codes we must 
have 

q km = lmodra = lmod(g m — 1). 

This is trivially satisfied by k m = m and indeed Eq. (|26p becomes m — y > 1 + log 9 e, which is clearly true for any 
e < 1. This family is computationally trivial, however, being that N = 1. 

Let us now extend this family to include many interesting instances. Let us first consider a fixed code [q m — 1, k m ] 
(i.e., N = 1, m fixed). Let us next generate a family of codes {[rjj(q m — 1), fcmj]}j=i,2,...,M by taking integer multiples 
rjj of q m — 1, and picking k m j > &m such that rjj{q m — 1)N = q kmj — 1 (this is just the irreducible cyclic code condition 
nN — q k — 1). We obtain a finite set of codes (M < oo) because it follows from Eq. (|25p that eventually the {k m j}j 
will become too large for the fixed error e, for each m. We then do this for every m £ N paying special attention to the 
integer multiples r\j . The r/j are selected in this construction so that two conditions are satisfied: (i) the corresponding 
{k m j}j are sufficiently small to ensure that Eq. ([25]) is satisfied, (ii) that N is bounded by {0(fc^)} m)J '. 

Regarding (i), the steps above are conveniently summarized as the following loop: 

Given e: 



2 Note, however, that when d = 2, we have in fact e < fc 3 ( fc 'en where en = - — — i and in this case the computational cost of the 
algorithm (see Theorem [2} is scaled down from 0(^-fc 2s ' fc '(logq) 2 ) to 0{-^k 3 ^ (log <?) 2 ), where the upper bound i l'24[ ) still applies. 
This means that within the family ICCC eo some instances can be solved faster than others by a factor of k s ( k \ at fixed eo- 
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1. For m = 1,2, ... 

2. Repeat j = 1, 2, ... 

n:=j(9 m -l) 
calculate k m j =ord g (n) 

if q 9n - k ™j 1 fe ">j/ 2 < e then reject k m j, else accept fc mj - and let rjj = j. 
Until j = M 

Until enough instances were found. 

Note that we are guaranteed to find such a non-empty finite set |fc m ,|j due to the fact that if gcd(g, ijj (q m — 1)) = 1, 
then 3k mj e N such that q k ^ = 1 mod j{q m - 1) (see, e.g., Th. 7-1 of [H). 

Regarding (ii), we still need to show that there exist solutions N m j to q kmj — 1 = nN m j that scale as 0(k^ n j). To 
see why such solutions exist consider solving q k — 1 = nTV with N = ak s and rt = rj(q m — 1), where a S R (we have 
dropped the subscripts for simplicity). The solution is 

m = log q [(q k -l)/(arjk s ) + l}. (28) 

In the loop above, only those m's satisfying Eq. (f2"B")) are acceptable in terms of the scaling of our algorithm. However, 
note that asymptotically Eq. (|28[) yields m = k — s log q k — \og q acq. This means that for every value of k and s it is 
possible to adjust a such that m is an integer by letting s log g k = log q ar\. 

At this point we have constructed an infinite family of pairs [n, k m j] [where n = j(q m — 1) and where m satisfies 
Eq. (|2"8"|) ]. each of which defines a graph which is a member of the set ICCC e . ■ 

Finally, we should mention without proof, that one can "fill" this family of graphs by considering the multitude 
of cases which do not conform to the restrictions in this construction, but which do obey relation l|26p and obey the 
asymptotic conditions given in definition ([T]). Moreover, the graphs we have constructed are quite sparse but they are 
only a subset of ICCC € . There are many more interesting graphs that can be handled by this fixed error bound. For 
example, graphs which are the direct sum of many copies of a smaller graph are excluded from this family. Further 
one may accept an error e that decreases polynomially in k for example and define a family of graphs in that way. 
We do not pursue this here. 

3. In the van Dam-Seroussi algorithm (Theorem 1 in 25]), a prepared state must must go through a phase 
estimation. In 36] it is demonstrated that if the number of qubits used in phase estimation is t = log 1/e + log(2 + 
1/(25)) then the probability of success is at least 1 — S. Ref. [13][p-7] states that for the Gauss sum algorithm 
t = 21og(< ? fc - 1). After some elementary algebra we obtain 5 = [2((q k — l) 2 e — 2] 1 . By the Chernoff bound, for fixed 
problem size fc, we only need to pick e such that the probability of failure 5 is less than 1/2. 

4. (a) We have that if a is a generator for F* fc and if i = jmodn, then the code words associated with a 1 and a? 

are cyclic permutations of each other, and therefore are of the same weight. Let us denote by [a 1 ] the (equivalence) 
class of all words {ot 3 }j with i — jmodn. In this step we wish to find the weight of [a 1 ]. This weight is given by 

Hence (up to irrelevant classical computations) the computational cost of computing S(i) is d — 1 times the cost of 
computing 7^. For any graph in ICCC e , obtaining these d — 1 phases has a (quantum) cost of 0(dk 2 (\ogq) 2 ), where 
d is bounded above by N. This comes from the complexity of computing the Gauss sum d times. (Recall that one 
has to repeat this algorithm 1/e times in order to ensure that we obtain a sufficiently close approximation.) 

(b) How many times must we compute S(i)7 The number of times is the number of different equivalence classes 
{[a*]}. Each equivalence class [a 1 ] is clearly of size n, and there are q k — 1 words. Recall that nN = q k — 1 for 
non-degenerate irreducible cyclic codes, and hence N is the number of different equivalence classes. (Actually the 
answer to "How many times must we compute 5'(i)?" is that one must only do this for the number of cyclotomic 
cosets of N - see subsection III Ft) . 

(c) For given S(i) we must compute a sum over d terms. The cost of computing each such term is constant once 
we have obtained the phases 7^ [which we have, in step (a)]. Combining this with step (b), we see that the total cost 
of computing all ^(^'s is (d — 1)N. 

At this point the total computational cost is therefore max[0(dfc 2 (log(j) 2 ), O(dN)]. We choose N — 0{k s ^) so 
if one takes s{k) to be a constant, then the algorithm is polynomial in k. Thus, the overall time complexity is 
0(d ■ fc max [ 2 > s W](logg) 2 ). Being that d < N = 0(fc s ( fc )), the complexity is ultimately 0(k 2ma ^ hs ^(\ogq) 2 ). 
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(d) We now have the list {S(i)}. Next, a tally of all the weights has to be done which has complexity <3(fc s ( fe '/ 2 ) 
using quantum counting [38| . The tally will return all the weights and counts of each weight (see Section IIV|) which 
are the exponents and coefficients respectively, of the polynomial A(l, y) which is the weight enumerator of the dual 
of the cocycle code. Note that this step does not effect the overall complexity of the algorithm as it has a smaller 
running time then the previous steps. 

5. Note that so far we have dealt with the [n, k] irreducible cyclic code that is the dual of the cocycle code of T, 
i.e., we have used n = \E\ and k — \E\ — \V\ + c(T). However, recall that T = T(E, V) and hence corresponds to the 
[n,n — k] = [\E\, \V\ — c(T)] code, i.e., the cocycle code of the graph T as desired. (This correspondence means that 
we can obtain information about interesting graphs by considering codes of smaller dimension.) Thus, in order to 
complete the proof we need the weight enumerator of the [n, n — k] cocycle code itself, so that we can apply Theorem 
ITD1 The relation between the weight enumerator A of a code C over the field F q k , and the weight enumerator A of 
the dual code C 1 - is given by the Mac Williams Theorem [30T ]: 

A 1 - (1, x) = q k ^ (1 + (q k - l)x) n A(l, y), (30) 

where 

<31) 

Applying the Mac Williams theorem and Barg's theorem [specifically Eq. (Tl5|) to A (l,x)], we arrive at the partition 
function 

Z(x) = X - n q c ^A ± {l 1 x). (32) 

Recall that y = e~@ J (where (3 — jr^y); thus we have the following final expression for the partition function as a 
function of (3: 

Z (.*(/?)) = q ^)+Hk-n) [ ((? fe _ 1} + x{f3) - 1] « A{1> my (33) 

It is simple to verify that given any temperature T > 0, and for both positive and negative J, Z (x(f3)) is always 
positive, as it should be. ■ 



E. Proof of the Corrolary 

We now give the proof of Corrolary [TJ 
Proof. Assume that we are given a graph T(E, V) whose CMM is the direct sum of the CMMs of two graphs Fi 
and T2 in ICCC e (we call such a graph F a "composite graph"). Let C be the code that corresponds to the graph F, 
i.e., C is the cocycle code of T. Let C\ and Ci be the corresponding cocycle codes of Ti and Y-i- This means that 
we may apply our algorithm to each of these sub-graphs and obtain their weight enumerators. To do this we need to 
obtain the weight enumerators of C\ and Ci which we can do efficiently. By definition C = C\ © C-z. If the respective 
lengths and dimensions of C\ and C2 are [m,l] and [m',l'}, then C is an [m + m',l + I'] linear code and its weight 
enumerator will be W — W1W2 [30]. Thus, once one obtains the weight enumerators of the sub-graphs, one has the 
weight enumerator of T and by using the arguments already outlined one can see that we can efficiently compute Zr- 
■ 

The above corollary allows the scheme outlined in this paper to be efficiently applied to many graphs because if 
one knows the generator matrices for C\ and C2 then one can efficiently construct the generator matrix for C by 
just taking the direct sum of the matrices. This gives a way of constructing examples of graphs for which the Potts 
partition function can be efficiently approximated. On the other hand (recall subsection III Cj) . we can efficiently check 
if a generator matrix decomposes into a direct sum of smaller matrices and we can efficiently check if these matrices 
generate codes whose duals are irreducible cyclic. 



F. Reducing the Computational Cost of the Algorithm via Permutation Symmetry 

We now briefly review the concept of p-cyclotomic cosets. As an introduction see [3(| ■ Consider the set of integers 
{0, 1, 2, . . . , JV — 1} and take p a prime number such that p does not divide N. The p-cyclotomic cosets of this set are 
given by the collection of subsets 

{0}, . . . . . . , {j,jp,j P 2 , . . ...y// |, ... 
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where j is an integer and r(j) is the smallest integer such that j(p r ^ — 1) = OmodiV, i.e., r(j) is the smallest integer 
before one begins to get repeats in the coset indexed by j. The number of cosets is finite so j is finite. As an example 
consider N = 16 and p = 3. One obtains 

{0}, {1, 3, 9, 11}, {2, 6}, {4, 12}, {5, 15, 13, 7}, {8}, {10, 14}. 

With regards to the scheme presented in this paper, we take g-cyclotomic cosets. We are guaranteed that gcd(A r , q) = 
1, which ensures that in our case the cyclotomic cosets are disjoint. That gcd(N, q) = 1 is due to the fact that there 

are solutions x, y £ Z to Nx + qy = 1 (Thm. 2-4 of [Hj]). For example, since N = q ~ x , one can take x — n(q — 1) 
and y = 1 + q fc_1 — q k , which are both integers. The relevance of the g-cyclotomic cosets of {0, . . . , N — 1} is that 
each element in a given coset has the same value of S(i). This is because of the fact that the mapping x i— > x q is 
a permutation of F q k and that the additive characters obey the identity exp(27riTr(6 9 )/<7) = exp(27riTr(6)/q) for all 
b € F q k. Hence S(i) is invariant under the mapping x h- ► x q . (See Appendix IC II for details on additive characters 
and the trace function Tr.) Therefore we only have to evaluate S(i) for one i in each coset. The computational 
cost of computing the coset representatives and the number of elements in each coset is linear in N 39]. This has 
the potential of significantly speeding up the algorithm but how much will clearly depend on the number of cosets 
generated by each instance. The number of cosets is given by 40] 

f\N 

where </>(/) is the Euler totient (the number of positive integers which are relatively prime to / and s — ovd q f means 
that s is the smallest positive integer such that q s = lmod/). Note that Nc replaces TV in the overall computational 
cost of our algorithm and Nc < N. While this can lead to a significant speedup in some cases, for the sake of 
simplicity and of having uniform bounds we will not pursue this further here. 

As an illustration of the power of using cyclotomic cosets, consider the following numerical example. Let q = 2, 
1/e > 8192, and consider a binary [113,85] code which is the dual to a binary [113,28] irreducible cyclic code (i.e., 
28 is the smallest integer such that 2 28 = lmodll3). This corresponds to either the fully ferromagnetic or fully 
anti- ferromagnetic Ising model on a graph with 113 edges and 86 vertices. Now note, that nN = 2 28 — 1 which implies 
that N = 2375535. Without the use of cyclotomic cosets this value of N would set our computational cost in that 
it is the number of times that S(i) must be queried. However, it turns out that there are Nc = 85439 cyclotomic 
cosets, and this is the actual number of queries to S(i). 

Note that there are instances where N -C n and cyclotomic cosets are not required. For example consider the 
binary [13981,20] irreducible cyclic code. Here n = 13981 and N = 75. Physically this corresponds to either the 
fully anti-ferromagnetic or ferromagnetic Ising model over a connected graph with 13981 edges and 13962 vertices 
(considering the dual code). 



III. CLASSICAL AND QUANTUM COMPLEXITY OF THE SCHEME 

Assuming one knew that a given graph was a member of ICCC £ , then classically one could proceed as follows using 
a state of the art algorithm ZETA for the computation of zeta functions of the family of curves C a : y q — y — ax N 
[23| . Here N is as given in the relation nN = q k — 1 and the index a is in one-one correspondence with the code 
words in the given cocycle code (specifically a £ F q k). The connection between the weights of words of an irreducible 
cyclic code and the number of rational points on the curves C a is well known, as is the connection between the zeta 
functions of such curves and Gauss sums [4l|. The complexity of using ZETA to compute the N — ak s ^ different 

weights is 0(k 6s ^ +3+,i (|) 5+£ ) [23[ and a tally of these weights will take 0{k s ^) operations (e' is a small real 
number - unrelated to e which parameterizes the class of graphs in question) . The overall complexity of finding the 
range of S(i) will therefore be 

classical cost = 0(fc 6s «+ 3+e ' (|) 5+£ ), (35) 

assuming that we know that a given graph is a member of ICCC C . As far as we know this is the fastest classical 
algorithm for the problem we have considered here. 

For a quantum computer we do not need to assume that testing for membership is efficient: we know that this can 
be done efficiently using the discrete log algorithm [l|. Above we showed that the overall complexity of finding Z 
is bounded by 0(fc 2max [ 1,s ( fc ^(logg) 2 ). This should be contrasted with the best classical result available, ([33]) . For 
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FIG. 2: A diagrammatic overview of the algorithm. (Box shapes do not have a meaning.) 



example if we take s = 2, (both classical and quantum methods are polynomial when we take s(k) to be a constant) we 
obtain an 0(k 11 ) improvement and an exponential speedup in q. One could imagine fixing a graph and calculating the 
partition function for increasing values of q. In this situation we have an exponential speedup over the best classical 
algorithm available. 

Note that there is a quantum algorithm for finding zeta functions of curves which is exponentially faster in q than 
the classical algorithm in [23| (as is ours). This is given in [2"4| . The use of this algorithm instead of the Gauss sum 
approximation algorithm is left for a future publication. 

On a final note, the classification ICCC C we have chosen is meant to highlight the boundary between BQP and P 
by fixing the acceptable error in the Gauss sum phases. One could opt for a perhaps more natural class of graphs 
by bounding the way that 1/e grows instead. For example, one could restrict the class of graphs in such a way that 
1/e ~ q^~ e ^.k+ 1 grows polynomially in k, in particular such that 

- < fc 5s(fc)+1 . 
e 

For this class of graphs one would also have a speedup in the quantum case. 



IV. DETAILED SUMMARY 



For convenience we recollect our definitions and provide a diagram of our scheme. We are considering the g-state 
Potts model (fully ferromagnetic or fully anti-ferromagnetic) over a graph T — (E,V), with q prime. This includes 
the Ising model (q = 2). Every graph T has a cycle matroid M(T) associated with it and every cycle matroid has 
a (|y| — c(r)) x \E\ matrix representation G (the CMM), where c(T) is the number of connected components of T. 
The columns of G encode the dependence structure of the graph and the row space of G generates the cocycle code 
of length \E\ and dimension | | — c(r). The length and dimension of the dual code are respectively n — \E\ and 
k = \E\-\V\ + c(T)._ 

Following is a detailed synopsis of the algorithm for computing the partition function. 
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1. Given a graph, efficiently determine if it belongs to ICCC e (Definition [I]) . This step appears to be hard on a 
classical computer in general, since it is equivalent to computing a discrete log. 

2. If the CMM G — [I\v\-c(T)\N] is the matrix representation over ~F q k of the cycle matroid of T, M(T), then the 
row space of H = [— X t \I\ e \_\ v \ +c (y^\ will be the code C(T). 

3. Let N = 0(k s ) where s is a constant integer that determines the complexity of the algorithm. Take C(T) as an 

k — l 

irreducible cyclic code of length n = q N and dimension k, i.e., we only consider graphs T where C(T) is an 
irreducible [n, k] cyclic code. 

4. If we can evaluate the weight enumerator of C(T) we will have successfully approximated the Potts partition 
function over the corresponding graph T. To do so: 

(a) Find the g-cyclotomic cosets of {0, 1, . . . , N — 1}. This step requires at most linear time in N. 

(b) Using the quantum algorithm for Gauss sums (2f| we are be able to estimate the weights of the words. The 
error in the Gauss sum algorithm can be high in this setting, and therefore we have to restrict the class 
of graphs further in order to obtain exact evaluations. Use the Gauss sum algorithm to return the phases 
7l,... ,7d-i [Eq. (fil)|) ] and then input these values into the function S(i) [Eq. (f2T)]) ]. According to the 

k 

McEliece Theorem (Th. IT2"j) we have to make d — 1 (where d = gcd(iV, q q Z\ )) calls to the quantum oracle 
and we can use these evaluations for each representative i of the g-cyclotomic cosets of {0, 1, . . . , N — 1}. 
This step has time complexity 0(dk 2 (log q) 2 )- 

(c) Let 6i, &2j • ■ • , &jVc be the coset representatives from the Nc cosets. Now each coset has cardinality u,-, i.e., 
bi belongs to coset i which has Vi elements. We evaluate u>i = S(bi) for each 6j, remembering that each Wi 
occurs Vi times. We end up with a list (u>i, uj 2 , . ■ . , Wjv c ) as wen as a ns t (i>i, i>2, ■ ■ ■ , vn c ) °f multiplicities. 

(d) Now perform a tally of repeats of the for each i S {1, Nc}- This returns a set of indices Aj = {ji} C 
{1, Nc}- We add the corresponding Vj i which yields = X^jeA w i' the number of words of weight uii 
up to cyclic permutations. To account for cyclic permutations due to the fact that we are working over 
cyclic codes, we have A4 — na,i, which is the desired weight spectrum. 

5. Now that we have determined the weight spectrum A4 in time 0(fc 2s (logg) 2 ) we have the coefficients for A(l, y) 
and so via the Mac Williams identity (|30|) we finally obtain the partition function (|33[) . 

V. CONCLUSIONS AND FUTURE DIRECTIONS 

In this work we have given a quantum algorithm for the exact evaluation of the fully ferromagnetic or anti- 
ferromagnetic Potts partition function Z under the restriction to certain sparse graphs (with logarithmically more 
edges than vertices). The methods we used exploit the connection between coding theory and statistical physics. The 
motivation for this work is an ongoing effort to identify instances of classical statistical mechanics for which quantum 
computers will have an advantage over classical machines. 

The approach we described involves using the link between classical coding theory and the Potts model via the 
weight enumerator polynomial A. One should note that A is another instance of the Tutte polynomial and so this 
connection is not surprising. The weight enumerator encodes information about all the different Hamming weights of 
the code words in a linear code and the weight of a code word can be given by a formula involving a sum of Gauss 
sums when dealing with a specific type of linear code. Since there exists an efficient algorithm to approximate Gauss 
sums via quantum computation [25J we were able to efficiently calculate the weights of code words for certain codes. 
Much of this paper dealt with the necessary restrictions that one must impose in order to achieve this last step. For 
example, once an error e in the Gauss sum algorithm is accepted, we demonstrated that there is a family of graphs 
for which one can find the exact partition function, and therefore the error does not scale within this family. Given a 
graph r, one can map the graph to a corresponding linear code via the incidence structure of T. The Potts partition 
function of T (with either fully ferromagnetic or anti-ferromagnetic interactions) is given by some easily computed 
function times the weight enumerator of the corresponding code. Due to the symmetries inherent in the mathematical 
structure of linear codes we were able to provide an efficient method to exactly determine Z for a class of graphs 
(ICCCe) which has a well defined correspondence to a subset of linear codes. 

In [42| it was shown that the exact evaluation of weight enumerators for binary linear codes is hard for the polynomial 
hierarchy. As our approach involved the exact evaluation of weight enumerators, it is not surprising that we had to 
make restrictions on the class of graphs so as to make our scheme efficient. The vantage that coding theory gives to 
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this particular problem, however, allows one to utilize the fact that certain graphs have properties that a quantum 
computer can take advantage of to provide a speed up. 

Notice that the related results in [l7l l20l| concern additive approximations; the methods used in this paper can be 
extended to a wider class of graphs if one relaxes the requirement of exact evaluation and instead similarly considers 
additive approximations of Z . An open question is what instances of the Potts partition function are amenable to 
an fpras (fully polynomial random approximation scheme). The methods used in [l7L [§3] have proven to be quite 
powerful. There is hope to extend some of these methods to non-planar graphs. One idea is to extend the algorithm 
in [13] to the Jones polynomial for virtual knots and then use some correspondence between the virtual knots and 
non-planar graphs. Another approach may involve seeing things in a new light. Note that the Jones polynomial is 
the Euler characteristic of a certain chain complex (43j . One can explore how effective quantum computers will be at 
approximating Euler characteristics in general. Perhaps there is a way of exploiting this in order to obtain knowledge 
about the Potts partition function. 

One may also consider strengthening the results given here by exploiting theorems about the minimal distance of 
cyclic codes. For example, there are theorems that guarantee a lower bound for the weight between any two words. By 
enforcing that the generator polynomial of the code be of a certain form, one would be guaranteed a certain distance 
between words and therefore the error in the Gauss sum approximation will be of little consequence for certain graphs 
[30l ] . As already mentioned in the Introduction, another potentially promising approach is to consider the scheme we 
have presented here but to replace the Gauss sum algorithm with the quantum algorithm for obtaining Zeta functions 
[24| . Work has to be done on understanding the exact cost of this algorithm when one is restricted to curves that are 
pertinent for the evaluation of the Potts model. 

Corollary [T] deals with the combination of graphs via a direct sum of codes gives one a way of "tiling" graphs for 
which one knows the partition function. This gives a quick way of obtaining the partition function of certain graphs 
that are made of many repeats of a simpler graph. There are other ways of combining codes that may allow one to 
study the partition function of new graphs, for example the concatenation or direct product of two codes [301 ]. 

The coding theoretic approach does give us a way of evaluating the partition function of instances of the Potts 
model at arbitrary temperatures but precisely the kinds of graphs which are involved is a question for future research. 
Indeed, the identification of the physical instances represented by the graphs for which our algorithm is efficient 
will shed light on the question that motivated this work in the first place [5[: what is the quantum computational 
complexity of classical statistical mechanics? 
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APPENDIX A: MATROIDS 



Definition 1 A matroid M on a set E is the pair (E, I) where I is a collection of subsets of E with the following 
properties: 

1. The empty set is in I . 

2. Hereditary Property: If A G / and B C A, then B £ I. 

3. Exchange Property: If A and B are in I and A has more elements than B, then 3a £ A such that a (f. B but 
BU{a}£l. 

The collection of sets in / are called the independent sets and E is referred to as the ground set. 

Definition 2 A cycle matroid of a graph V is the set of all edges of T as the ground set E together with I as the 
subsets of E which do not contain a cycle. So the independent sets are collections of edges which do not have cycles. 
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Recall that in graph theory one refers to such an edge set (the above independent set) as a forest. 

In matroid theory a matrix representation is a matrix whose column vectors have the same dependence relations as 
the matroid it is representing. More clearly, the column vectors represent the matroid elements and the usual notion 
of linear dependency determines the dependent sets and therefore the independent sets as well. Thus, the matrix can 
be said to generate the matroid. 

As an example, imagine the triangle graph of three nodes with three edges A,B, and C. The cycle matroid consists 
of each of the edges individually and any collection of two edges. All three edges form a cycle so it cannot be included. 
We require our matrix representation to encode this independence structure of the edges. One may work over any 
field here because we are only concerned with graphic matroids, i.e., matroids which can be represented as a cycle 
matroid of some graph. (Graphic matroids are representable over any field |28[.) Now, if we think of column 1,2 and 
3 as edges A,B and C respectively we can take the following matrix as a representation in F 2 : 



Since addition is mod 2 here, a cycle is any collection of columns that sum to the 0-vector. We can take all 
collections where this does not happen and these collections will form /. In this way, this matrix is a representation 
of the cycle matroid for the triangle graph. In matroid theory one has the familiar notion of a base. 

Definition 3 A base of a matroid M = (E,I) is a maximal independent subset of E. 

It is not a coincidence that the left part of the matrix is the 2x2 identity matrix. In general one can form a 
representation (known as the standard matrix representation) where one begins with an identity matrix which is r x r 
where r is the size of the base of M and append to it columns that capture the dependence structure of the matroid 
in question. In this way, the columns of the identity matrix represent the chosen basis of M. So M is isomorphic to 
the matroid induced on the columns of the matrix by linear dependence. A more precise explanation can be found in 
[28| . What is important for us is that such a matrix representation is possible. 



Let us recall some definitions from algebra. Take q to be prime or a power of a prime. 

Definition 4 A ring is a set R which is an abelian group [R, +) with as the identity, together with (R, x), which 
has an identity element with respect to x where x is associative. 

Definition 5 An ideal I is a subset of a ring R which is itself an additive subgroup of (R, +) and has the property 
that when x € R and a £ I then xa and ax are also in I . 

Definition 6 A principle ideal is an ideal where every element is of the form ar where r G R. 

Thus, a principle ideal is generated by the one element a and a principal ideal ring is a ring in which every ideal is 
principle. 

There is an important isomorphism between powers of finite fields F™ and a certain ring of polynomials. Recall 
that the multiples of x n — 1 form a principal ideal in the polynomial ring F g [x]. 

Therefore the residue class ring F q [x]/(x n — 1) is isomorphic to F™ since it consists of the polynomials 




APPENDIX B: ALGEBRAIC APPROACH TO (IRREDUCIBLE) CYCLIC CODES 



1. Irreducible cyclic codes as minimal ideals 



{a + a\x + 



• +a n -ix n 1 \a l e F 9 ,0 < i < n). 



Therefore, taking multiplication modulo x 



.n 



1 we can make the following identification: 



(ao, Oi, . . . , a n -i) S F™ 



a + ayx H h a n -ix n 1 S F q [x]/(x n - 1). 



(Bl) 



This implies the following theorem. 



Theorem 1 A linear code C in F™ is cylic 



C is an ideal in F q [x]/(x n - 1).JM] 
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Proof. In one direction this is easy since if C is an ideal in F q [x]/(x n — 1) and c(x) — ao + a%x + ■ ■ ■ + a n _ix" _1 is 
a codeword, then by definition xc{x) £ C as well and so (a n _x, a , ax,..., a„_2) € C. In the other direction, one just 
has to note that since C is cyclic, xc(x) is in C for every c(x) G C which means that x k c(x) is in C for every k. But 
C is linear by assumption so if h{x) is any polynomial then h{x)c{x) is in C and thus C is an ideal. ■ 

Note that F q [x]/ (x n — 1) is a principal ideal ring and therefore the elements of every cyclic code C are just multiples 
of g(x), the monic polynomial of lowest degree in C; g(x) is called the generator polynomial of C. Because of the 
correspondence (|B1[) above we know that given g(x) = go + g\x + ■ ■ ■ g n -kX n ~ k divides x n — 1 since otherwise 

</(a;) could not be the monic polynomial of lowest degree in C], we have the vector (go,gi, ■ ■ ■ ,9n-k)- We then can 
write the k x n generator matrix of the code as 

/go gi ■ ■■ g n -k o o • • • o \ 
go ■ ■ ■ g n -k-x g n -k • • • I 
o o ••• ■••or 

V • • • g Q gx ■ ■ ■ g n -k J 

In this way, the row space generates C. If we can write x n — 1 = W\{x)w2{x) ■ ■ -Wt{x) as the decomposition of 
x" — 1 into irreducible factors, then the code generated by fj-^y is called an irreducible cyclic code. In algebraic terms 
what this means is that the code C is a minimal ideal of F q k [x]/(x n — 1), i.e., C contains no subspace (other than 
0) which is closed under the cyclic shift operator [33( . The reason we are interested in irreducible cyclic codes is that 
there is an established connection between the weights of the code words and Gauss sums. 

We now turn to the representation of irreducible cyclic codes, specifically 1) the form that the generator matrix can 
take, 2) a description of the codewords in terms of the trace function. Issue 1) relates back to the matrix representation 
of the cycle matroid of graphs and issue 2) will allow us to make the connection to Gauss sums. 



2. Generator matrix of a cyclic code and the cycle matroid matrix 

There is an alternative (but equivalent) way of constructing the generator matrix of a cyclic code which will 
immediately show its usefulness in its relationship with the cycle matroid matrix representation. Let C be an [n, k] 
cyclic code and let g(x) be the generator polynomial. Now, divide x n ~ k+l by g(x) for < i < k — 1. We have 

x n-k+i = qi ( x )g(x) + ri(x) 

where degri(x) < degg(x) = n — k or ri(x) — 0. What this means is that we have a set of linearly independent code 
words. Namely, we have the k code words given by 

x»- k+i -r i (x) = q i (x)g(x) 

in C. More explicitly, take the remainder polynomials r^(x) after applying the division algorithm and using the 
correspondence (|B1[) above, form the k x (n — k) matrix R and append the k x k identity matrix to it. The rows of R 
are the coefficients of the r^(x) and one then has the k x n generator matrix [7fe|i?]. This is precisely the form of the 
matrix representation for matroids discussed above. Thus, we have a correspondence between the generator matrix 
for an irreducible cyclic code and the matrix representation for the cycle matroid of a graph. 

Proposition 1 In an [n, k] irreducible cyclic code there are at most N words of different non-zero weight where 
N = {q k -l)/n. 

Proof. For any irreducible cyclic code we have the relation q k — 1 = nN over the field F g . The length of each word 
is n and any cyclic permutation of a word preserves the Hamming weight. Therefore, for each word there are n — 1 
other words of equal weight. As there are q k — 1 words of non-zero weight, if wc assume that every word that does 
not arise from the cyclic permutation of another word is of a different weight, then there are (q k — l)/n words of 
different weight. Being however that there is the possibility of repeats in weight among words which are not cyclic 
permutations of each other, there are at most N different weights. ■ 



APPENDIX C: GAUSS SUMS AND A QUANTUM ALGORITHM FOR THE ESTIMATION OF GAUSS 

SUMS 



Gauss sums are sums of products of group characters. 
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1. Characters 

A character of a finite group (G, *) is a homomorphism $ from G to the group of the non-zero complex numbers 

C. 

We are interested in two types of characters, namely the multiplicative and additive characters. Let F = F q k (where 
k is a positive integer) be a finite field as defined previously, and let F* be the multiplicative group of F. Let g be a 
primitive element of F (i.e., g generates F). Let 

( q = e 27 ™/« 

denote the <?th root of unity. Let x = g k £ F* . A multiplicative character \j ( x ) is a mapping from the set of powers 
{m} in x — g m to powers of roots of unity. Specifically, the group of multiplicative characters x — {Xj}j consists of 
the elements 

Xj{*) = Xi(9 m ) = C?!.!, m = 0,...,q-2eF g ; j = 0, . . . , q k - 2 £ F. 

Let a £ F. An additive character ej(a) is a mapping from F to powers of roots of unity via the trace function. 
Specifically, the group of additive characters e = {ep}p consists of the elements 

e (a) = C 9 Tr(/3a) Va,/3 = 0,...,g fc -leF 
where the trace is defined in Eq. (fT7|) . 

2. Discrete Log 

For every non-zero x £ F* the discrete logarithm with respect to a primitive clement g G F is given by 

log ff (at) = log s ((/ m ) = mmod {q k - 1). 
This means that every multiplicative character can be written 

Xj {x)= Xj {9 m ) = i^l {x) (CI) 

for x ^ and x(0) = 0. 

3. Gauss Sums 

Let ep and Xj be an additive and multiplicative character respectively. Then the Gauss Sum G(xj,ep) is defined 
as: 

G(x j ,ep)='£xj(x)ep(x). (C2) 

xEF' 

Gauss sums are used extensively in number theory, e.g., in the study of quadratic residues or Dirichlet L- functions. 

To compute a Gauss sum we need to specify the field F and the indices (3 £ F and j £ F of the additive and 
multiplicative characters respectively. Thus the input size to a Gauss sum computation is O(fclogq) bits. We can 
now define the Gauss sum over F as 

i£F* 

It is well known that if Xj 7^ 1 then [32l |: 

G F ( Xj ,[3) = V¥e n , (C3) 

where 7 = 7f(Xj j /^)< This means that all we need to do is approximate the angle 7 mod (2w) in order to approximate 
the Gauss sum. This is precisely the Gauss sum approximation problem for finite fields. 
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4. Quantum Algorithm for Gauss Sums 

Van Dam and Seroussi devised an efficient quantum algorithm to estimate Gauss Sums (25j . The following is an 
outline of the essentials of the proof; we refer the reader to [25[ for a complete description as well as a discussion of 
the complexity of estimating Gauss sums. 

Theorem 2 {Quantum Amplitude Amplification} Let f : S i— * {0, 1} be a function for which we know the total 
weight WfW^ but not those values x € S for which f{x) = 1. Then the corresponding state 

11/11/2 xes 

can be efficiently and exactly prepared on a quantum computer where we have to make a number of queries to f of the 

order0 (\Rrk;)- 

This is an essential ingredient in Grover's quantum search algorithm. For a proof and details see @]. It follows 
from Eq. (jClj) and Shor's discrete log algorithm [l[ that given g, q k and j, we can efficiently create the state \Xj)- 
The following lemma is essential in this regard. First note that for any set S we define 

V \°\ xes 



Lemma 1 For a finite field F q k and the triplet (q ,g,r) (the specification of a multiplicative character Xr), the state 

\Xr) = , ] V Xr{x)\x) 

and its Fourier transform \xr) can be created in polylog(g fc ) time steps on a quantum computer. 
Proof. We first create the state 

by using Grover's amplitude amplification on F q k and the Fourier transform. Next, in superposition over all x S F* k , 
we calculate log 9 (x) and subtract r\og g (x). 

WW L ) xeF* k j=o 

v«*(? fc - 1) ^ J=0 

q" 

= \Xr)\l) (C7) 

To get |x r ) we just need to apply the Fourier transform. ■ 

The technique used in the above proof is known as the phase kickback trick. Now we are ready for the following. 

Theorem 3 Algorithm for approximating Gauss Sums. Consider F q k, a nontrivial multiplicative character \r 
and (3 € F* k . If we apply the quantum Fourier transform over this field to \Xr}> followed by a phase change 

lv> — x 2 M\y) (C8) 

then we generate an overall phase change given by 

\Xr) 



j \ 7 Y] Xr(x)\x) > ^2 |Xr>- 
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Proof. After a Fourier transform we have 



/k( \ . E ( E Xr« ) IV) 

/fc A n E G F?fc ( X ,,^)|y> 

qfc 



Then 



G F „,(Xr,/3) ^ _ 



lxr) V1 k (1 k - 1) 

Now we know that we can efficiently (and exactly) create the phase change given by (|C8[) . Doing so gives us 



V<r(<r - i) ^ Vr 



since |xr) = - 7^ — J2vff' Xr{y)\v) an d Xr{y 1 )Xr{y) = 1- Thus, the coefficient of |xr) is just e n . It is well known 
\/q k -i y q k 

that one can efficiently estimate the phase of such a function to within an expected error of 0(l/n) where n is the 
number of copies of e n \Xr) we sample. Therefore we arrive at an estimate of 7 and hence of the Gauss sum in 
question. ■ 

This gives way to the following theorem about the time complexity of the algorithm and is the culmination of the 
first part of the paper [25| . 



Theorem 4 For any e > 0, there is a quantum algorithm that estimates the phase 7 in G F k (Xr,P) = V q k e % ^ ' , with 
expected error E(\j — 7]) < e. The time complexity of this algorithm is bounded by 0(| • polylog(g' c )) |H/. 

Note that the "poly" in polylog refers to a quadratic polynomial. 



